TomV | Stripe Developers | Page 1

last anvilBOT Nov 23, 2022, 10:24 AM

#

frail bluff Nov 23, 2022, 10:24 AM

#

👋 happy to help

#

I'm not familiar with PSD2 would you mind elaborating?

tight sky Nov 23, 2022, 11:20 AM

#

Hey, taking over here. There's no specific regulation re: expiration of off-session 3DS/auth of cards. See: https://www.eba.europa.eu/single-rule-book-qa/-/qna/view/publicId/2018_4031#:~:text=Are card payments,RTS SCA requirements%3F

European Banking Authority

2018_4031 Applicability of SCA to ‘card payments initiated by the p...

#

Ultimately the decision to considering a MIT out of SCA scope resides with the issuer/bank. It may well be that a cardholder's bank requires auth for SCA even when the MIT is related to a previous, valid mandate

#

So to answer your original Q: no, cards saved/auth'd via s_f_u don't expire after 90 days

#

Your integration should be designed to handle instances where authentication is requested for any off-session payments, regardless of timeframe

#

Hope this helps!

#TomV